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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS: 

1 . (Currently Amended) A cryptographic system combining the so called di s crete 
logarithm and factorization principles, comprising at least one of an encryption system and 
a decryption system that utilizes , among other things, public keys and a secret key, wherein 
the said public keys comprise, at least: 

a. an RSA modulus n, greater in size than 640 bits, having the following property: 
n = (A p A + 1) x (B p B + 1) 

in which: 

Pa and pB are prime numbers greater in size than 320 bits, 
(A pA + 1) is an RSA prime denoted p, 
(B pB + 1) is an RSA prime denoted q, 

A is the product of k/2 (k being an even integer number between 10 and 120) prime 
numbers (denoted p[i], i = 1 to k/2) of relatively small size (between 2 and 16 bits) and 

B is the product of k/2 prime numbers (also denoted p[i], i = k/2 4- 1 to k); 

the p[i]s being of relatively small size (between 2 and 16 bits), and also able to be 
mutually prime; 

b. an exponentiation base g, of order 0(n)/4 (where <t>(n) denotes the Euler indicator 
function), g therefore having not to be a p[i]-th power modulo n of any number. 
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2. (Currently Amended) A cryptographic system according to Claim 1 comprising at 
least an encryption/decryption system[[l]], wherein the encryption of a message m, m < 
AB, consists of comprises the operation: 

c = g m mod n 
where c denotes the cryptograph (encrypted message). 

3. (Currently Amended) A cryptographic system according to Claim 2 comprising an 
encryption/decryption system, wherein the integrity of a message m can be provided by the 
encryption of m|h(m) (h denoting a hashing function and | denoting concatenation), or by 
the encryption of DES (key, m), the where said key being is a key accessible to all. 

4. (Currently Amended) A cryptographic system according to Claim 1 comprising an 
encryption/decryption system, and a key escrow system, wherein the said secret key of the 
a decrypter or of the an escrow centre authority is the number O(n), and in that wherein the 
operation of decryption or of recovering the identity of a user consists of comprises the 
following steps: 

a. calculating, for i from 1 to k: y[i] = c 0(n)/p[i] mod n; 

b. for i from 1 to k 
for j from 1 to p[i] 

comparing y[i] with the values g j<l>(n)/p[i] mod n independent of m; 
if g ja>(n)/ptn mod n = y[i] then assign |J[i] = j 

c. reconstructing the a message m from the Chinese remainder theorem CRT and the 
values p[i]. 
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5. (Currently Amended) A cryptographic system according to Claim 4 
comprising an encryption/decryption system and a key escrow system, the wherein said 
decry pter speeds up the calculation of the quantities y[i] by calculating: 

a) z = c r mod n where r = pApB 

b) for i from 1 to k: y[i] = z AB/p[i] mod n, 

so as to take advantage of the difference in size between AB/p[i] and 0(n)/p[i] for speeding 
up the calculations. 

6. (Currently Amended) A cryptographic system according to Claim 4 comprising an 
encryption/decryption system and a key escrow system er-5, wherein the decrypter pre- 
calculates and saves, once and for all, the table of values g j0(n)/p[i] mod n for 1 < i < k and 1 
<j£p[i] 

or, 

more specifically, a truncation or a hashing of these values (denoted h) having the following 
property: 

h (g J°< n >W] m od n) * h (g j 0(n)/ P [i] mod n) if j * j ' . 

7. (Currently Amended) A cryptographic system according to any one of Claim 
Claims 4 to 6 comprising an encryption/decryption system and a key escrow system, 
wherein the decrypter speeds up its calculations by separately decrypting the message 
modulo p and then modulo q, and constructing the modulo results with the help of the 
Chinese remainder theorem in order to find m again. 
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8. (Currently Amended) A cryptographic system according to any one of Claims 4 to 
1- Claim 4 , wherein a key escrow centre or authority implemented implements the following 
steps: 

a. it codes the identify of the user ID = I 2 M ID[i] where ID[i] are the bits of the 
identity of the said user of the system (the sum being taken for I from 1 to k) by calculating 
e(ID) = tt p[i] ID(i) (the product being taken for I from 1 to k); 

b. it issues, to the user, an El-Gamal key (that is to say an exponentiation base) c = 
g e(,D)u mod n, 

in which u is a large random prime or a number prime with O(n); 

c. it thus makes it possible for the user to derive, from c, his El-Gamal public key by 
choosing a random number x and raising c to the power x modulo n. modulo n; 

d. with the aim of finding the trace of the user, the authority extracts, from the an El- 
Gamal cryptogram of the an encrypter, the said cryptogram always comprising two parts, 
the part: 

v = c r mod n 

where r is the encryption random number chosen by the encrypter. encrypter; 

e. knowing O(n), the said authority finds the bits ID[i] by means of the following 
algorithm: 

1. calculate, for i from 1 to k: y[i] = v 0(n)/p[il mod n 

2. if y[i] = 1, then |j[i] = 1, otherwise |j[i] =0 

3. calculate: 
ID' = I 2 M 
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4. find: ID = CCE(ID') 
in which CCE denotes an error correction mechanism. 

9. (Currently Amended) A cryptographic system according to any one of Claims 4 to 
7 Claim 4 comprising a key escrow system, it4s based on the s o called a Diffie-Hellman 
key exchange mechanism where a number c, obtained by raising g to a random power a 
modulo n by one of the parties party , is intercepted by the said escrow authority: 

c = g a mod n 

the said escrow authority finds a again in the following manner: 

a. knowing the factorization of n, fee said authority finds, with the help of the 
decryption algorithm, the value 

a = a mod AB 

that is a = a + pAB; 

b. the said authority calculates: A = c/g a mod n = g pAB mod n 

c. using a cryptanalysis algorithm, the authority calculates the discrete logarithm p 
A = (g AB ) p mod n 

d. the authority finds 
a = a 4- pAB 

and decrypts the communications based on the use of a. 

10. A cryptographic system according to any one of Claims 2 to 9 Claim 2 comprising 
an encryption/decryption system and a key escrow system, wherein the RSA modulus n is 
the product of three factors: 
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n = (Ap A + 1) x (BpB +l)x (Cp c + 1) 

in which pa, pB, pc are prime numbers greater in size than 320 bits, 

(ApA + 1), (BpB + 1), (Cpc + 1) are RSA primes, denoted respectively p, q, r, 
A, B and C are each the product of k/3 prime numbers (denoted p[i], i = 1 to k), 

the p[i]s being of relatively small size (between 2 and 16 bits) and able to be mutually 

prime numbers and k being an integer number between 10 and 120, so that the product 

ABC has at least 160 bits. 

Claims 11-12. (Canceled) 

13. (Currently Amended) A cryptographic system wherein including at least one of an 
encryption system and a decryption system that uses a public key and a private key are used 
in providing secure encryption and decryption of a message m, the public key comprising: 

an RSA modulus n, wherein n is greater than 640 bits, and wherein n = (ApA + 
l)(BpB + 1), wherein pA and pB are prime numbers greater in size than 320 bits, (ApA + 1) 
is an RSA prime denoted p, (BpB + 1) is an RSA prime denoted q, A is the product of k/2 
prime numbers p[i], i = 1 to k/2, B is the product of k/2 prime numbers p[i], i = 1 to k/2, 
the p[i]'s being mutually prime, and wherein k is an even integer; and 

an exponentiation base g, wherein g is of the order cp( n )/4, O(n) being the Euler 
indicator function. 

14. (Previously Presented) The cryptographic system of claim 13, wherein the message 
m is encrypted into a cryptogram c according to c = g m mod n. 
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15. (Currently Amended) The cryptographic system of claim 14, wherein the integrity 
of the message m can be provided by the encryption m | h(m) wherein h(m) is a hashing 
function and | denoting denotes concatenation. 

16. (Previously Presented) The cryptographic system of claim 14, wherein the integrity 
of the message m can be provided by the encryption of a DES key, wherein the DES key is 
publicly available. 

17. (Previously Presented) The cryptographic system of claim 13, wherein the secret 
key is equal to <t>(n), and wherein decryption of the message m according to reconstructing 
the message m from the Chinese remainder theorem CRT and the values |j[i], where |j[i] = 
j when g j ° (n)/pli] mod n = y[i], y[i] = c 0(n)/p[i] mod n. 

18. (Currently Amended) The cryptographic system of claim 17, wherein the decrypter 
speeds up its calculations by separately decrypting the messgae message modulo p and then 
modulo q, and constructing the modulo results with the help of the Chinese remainder 
theorem to obtain the message m. 

19. (Previously Presented) The cryptographic system of claim 17, further comprising: 
an El-Gamal key c = g e(ID)u mod n, wherein u is a large random prime, ID = 

Z2 I " 1 ID[i], ID[i] representing bits of the identity of a user of the system. 
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20. (Previously Presented) A method of encrypting a message m, comprising: 

calculating n according to n = (ApA + l)(BpB + 1), wherein pa and pB are prime 
numbers greater in size than 320 bits, (ApA + 1) is an RSA prime denoted p, (BpB + 1) is 
an RSA prime denoted q, A is the product of k/2 prime numbers p[i], i = 1 to k/2, B is the 
product of k/2 prime numbers p[i], i = 1 to k/2, the p[i]'s being mutually prime, and 
wherein k is an even integer; and 

calculating a cryptogram of the message m according to c = g m mod n, wherein the 
exponentiation base g is of the order <t>(n)/4, O(n) being the Euler indicator function. 



21. (Previously Presented) The method of claim 20, wherein the message m is 
decrypted, further comprising: 

calculating for i = 1 to k: y[i] = c 0(n)/p[i] mod n; 

comparing y[i] with values g ja)(n)/p[i] mod n independent of m, for I from 1 to k and j 
from 1 to p[i]; 

if g j0(n)/p[i] mod n = y[i] then assign |j[i] = j; and 

reconstructing the message m from the Chinese remainder theorem CRT and the 
values |j[i]. 



22. (Previously Presented) The method of claim 21, wherein the decrypter speeds up 
the calculation of the quantities y[i] = z AB/p[i] by calculating z = c r mod n where r = pApB 
for = 1 to k. 
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23. (Previously Presented) The method of claim 21, wherein the decrypter calculates 
and saves the table of values g ja>(n)/p[ ' ] mod n for i from 1 to k and j for 1 to p[i]. 
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